MFT_analysis_public.ipynb

{
 "cells": [
  {
   "cell_type": "markdown",
   "id": "3f35037d",
   "metadata": {},
   "source": [
    "# MFT Analysis\n",
    "* Process MFT file with MFTECmd to CSV.\n",
    "* Load CSV into a DataFrame.\n",
    "* Days with more events in MFT.\n",
    "* Files with more events in MFT.\n",
    "* Executable files created before to de ransom note.\n"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 3,
   "id": "d70b1834",
   "metadata": {},
   "outputs": [],
   "source": [
    "import os\n",
    "from subprocess import check_output\n",
    "mft_path = \"\\\"C:\\\\kape\\\\collected\\\\2021-06-01T151604\\\\C\\\\$MFT\\\"\"\n",
    "mftexplorer_path = \"\\\"C:\\\\MFTExplorer\\\\MFTECmd.exe\\\"\"\n",
    "output_folder = \"C:\\\\Documents\\\\test\"\n",
    "output_filename = \"MyOutputFile.csv\"\n"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "id": "e70f4258",
   "metadata": {},
   "outputs": [],
   "source": [
    "%%time\n",
    "command = \"{0} -f {1} --csv \\\"{2}\\\" --csvf \\\"{3}\\\"\".format(mftexplorer_path, mft_path, output_folder, output_filename)\n",
    "print(command)\n",
    "output = os.popen(command).read()"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "9b549403",
   "metadata": {},
   "source": [
    "## DataFrame creation with MFT"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 4,
   "id": "f158d520",
   "metadata": {
    "scrolled": true
   },
   "outputs": [
    {
     "name": "stderr",
     "output_type": "stream",
     "text": [
      "<decorator-gen-55>:2: DtypeWarning: Columns (10,20,22,26,30,31,32) have mixed types.Specify dtype option on import or set low_memory=False.\n"
     ]
    },
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Wall time: 5.1 s\n"
     ]
    }
   ],
   "source": [
    "%%time\n",
    "import pandas as pd \n",
    "pd.set_option('display.max_columns', 500)\n",
    "\n",
    "data = pd.read_csv(output_folder + \"\\\\\" + output_filename)"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 5,
   "id": "dacaa745-f830-4883-806a-3beacc4b568d",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "501082"
      ]
     },
     "execution_count": 5,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "len(data)"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 8,
   "id": "d5c3b76a-530b-4db2-a978-6e34291ee5dd",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>EntryNumber</th>\n",
       "      <th>SequenceNumber</th>\n",
       "      <th>InUse</th>\n",
       "      <th>ParentEntryNumber</th>\n",
       "      <th>ParentSequenceNumber</th>\n",
       "      <th>ParentPath</th>\n",
       "      <th>FileName</th>\n",
       "      <th>Extension</th>\n",
       "      <th>FileSize</th>\n",
       "      <th>ReferenceCount</th>\n",
       "      <th>ReparseTarget</th>\n",
       "      <th>IsDirectory</th>\n",
       "      <th>HasAds</th>\n",
       "      <th>IsAds</th>\n",
       "      <th>SI&lt;FN</th>\n",
       "      <th>uSecZeros</th>\n",
       "      <th>Copied</th>\n",
       "      <th>SiFlags</th>\n",
       "      <th>NameType</th>\n",
       "      <th>Created0x10</th>\n",
       "      <th>Created0x30</th>\n",
       "      <th>LastModified0x10</th>\n",
       "      <th>LastModified0x30</th>\n",
       "      <th>LastRecordChange0x10</th>\n",
       "      <th>LastRecordChange0x30</th>\n",
       "      <th>LastAccess0x10</th>\n",
       "      <th>LastAccess0x30</th>\n",
       "      <th>UpdateSequenceNumber</th>\n",
       "      <th>LogfileSequenceNumber</th>\n",
       "      <th>SecurityId</th>\n",
       "      <th>ObjectIdFileDroid</th>\n",
       "      <th>LoggedUtilStream</th>\n",
       "      <th>ZoneIdContents</th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>0</th>\n",
       "      <td>0</td>\n",
       "      <td>1</td>\n",
       "      <td>True</td>\n",
       "      <td>5</td>\n",
       "      <td>5</td>\n",
       "      <td>.</td>\n",
       "      <td>$MFT</td>\n",
       "      <td>NaN</td>\n",
       "      <td>482082816</td>\n",
       "      <td>1</td>\n",
       "      <td>NaN</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>Hidden|System</td>\n",
       "      <td>DosWindows</td>\n",
       "      <td>2018-05-09 18:18:22.2782672</td>\n",
       "      <td>NaN</td>\n",
       "      <td>2018-05-09 18:18:22.2782672</td>\n",
       "      <td>NaN</td>\n",
       "      <td>2018-05-09 18:18:22.2782672</td>\n",
       "      <td>NaN</td>\n",
       "      <td>2018-05-09 18:18:22.2782672</td>\n",
       "      <td>NaN</td>\n",
       "      <td>0</td>\n",
       "      <td>167459167393</td>\n",
       "      <td>256</td>\n",
       "      <td>NaN</td>\n",
       "      <td>NaN</td>\n",
       "      <td>NaN</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "</div>"
      ],
      "text/plain": [
       "   EntryNumber  SequenceNumber  InUse  ParentEntryNumber  \\\n",
       "0            0               1   True                  5   \n",
       "\n",
       "   ParentSequenceNumber ParentPath FileName Extension   FileSize  \\\n",
       "0                     5          .     $MFT       NaN  482082816   \n",
       "\n",
       "   ReferenceCount ReparseTarget  IsDirectory  HasAds  IsAds  SI<FN  uSecZeros  \\\n",
       "0               1           NaN        False   False  False  False      False   \n",
       "\n",
       "   Copied        SiFlags    NameType                  Created0x10 Created0x30  \\\n",
       "0   False  Hidden|System  DosWindows  2018-05-09 18:18:22.2782672         NaN   \n",
       "\n",
       "              LastModified0x10 LastModified0x30         LastRecordChange0x10  \\\n",
       "0  2018-05-09 18:18:22.2782672              NaN  2018-05-09 18:18:22.2782672   \n",
       "\n",
       "  LastRecordChange0x30               LastAccess0x10 LastAccess0x30  \\\n",
       "0                  NaN  2018-05-09 18:18:22.2782672            NaN   \n",
       "\n",
       "   UpdateSequenceNumber  LogfileSequenceNumber  SecurityId ObjectIdFileDroid  \\\n",
       "0                     0           167459167393         256               NaN   \n",
       "\n",
       "  LoggedUtilStream ZoneIdContents  \n",
       "0              NaN            NaN  "
      ]
     },
     "execution_count": 8,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "data.head(1)"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 6,
   "id": "351aac9e",
   "metadata": {},
   "outputs": [],
   "source": [
    "data.set_index(\"EntryNumber\", inplace=True)"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 7,
   "id": "7fb2cdea",
   "metadata": {},
   "outputs": [
    {
     "name": "stdout",
     "output_type": "stream",
     "text": [
      "Wall time: 2.54 s\n"
     ]
    }
   ],
   "source": [
    "%%time\n",
    "data['Created0x10'] =  pd.to_datetime(data['Created0x10'], format='%Y-%m-%d %H:%M:%S.%f')\n",
    "data['Created0x30'] =  pd.to_datetime(data['Created0x30'], format='%Y-%m-%d %H:%M:%S.%f')\n",
    "data['LastModified0x10'] =  pd.to_datetime(data['LastModified0x10'], format='%Y-%m-%d %H:%M:%S.%f')\n",
    "data['LastModified0x30'] =  pd.to_datetime(data['LastModified0x30'], format='%Y-%m-%d %H:%M:%S.%f')\n",
    "data['LastRecordChange0x10'] =  pd.to_datetime(data['LastRecordChange0x10'], format='%Y-%m-%d %H:%M:%S.%f')\n",
    "data['LastRecordChange0x30'] =  pd.to_datetime(data['LastRecordChange0x30'], format='%Y-%m-%d %H:%M:%S.%f')"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "2b232d4d",
   "metadata": {},
   "source": [
    "### Days with more events in MFT"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 8,
   "id": "704c6257",
   "metadata": {},
   "outputs": [],
   "source": [
    "dates = data[\"LastRecordChange0x10\"]"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 9,
   "id": "a477ea3a-50f3-45bb-bbf5-ee5ac050296c",
   "metadata": {},
   "outputs": [],
   "source": [
    "dates.index = dates.dt.to_period('d')"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 10,
   "id": "e1cd7a1b-2375-4a35-9aec-febfeba4a7d1",
   "metadata": {},
   "outputs": [],
   "source": [
    "s = dates.groupby(level=0).size()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 11,
   "id": "011a1251-e5b8-4beb-ad73-a1d0ef3da657",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "LastRecordChange0x10\n",
       "2018-05-09    91072\n",
       "2021-05-13    78420\n",
       "2021-03-11    40069\n",
       "2021-02-22    26698\n",
       "2018-06-21    24047\n",
       "2021-05-17    23735\n",
       "2021-02-11    21200\n",
       "2019-08-13    15962\n",
       "2021-01-25    15456\n",
       "2021-03-29    14427\n",
       "Freq: D, Name: LastRecordChange0x10, dtype: int64"
      ]
     },
     "execution_count": 11,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "s.sort_values(ascending=False).head(10)"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "79881a87",
   "metadata": {},
   "source": [
    "### Graph by dates"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "id": "96fb5912-f987-40bd-b815-6049637b77b7",
   "metadata": {},
   "outputs": [],
   "source": []
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "id": "6cb1c1ca-b6d3-45dc-9f82-06462523b849",
   "metadata": {},
   "outputs": [],
   "source": []
  },
  {
   "cell_type": "code",
   "execution_count": 12,
   "id": "7526057e-6785-4c85-8477-a73180ee8f7a",
   "metadata": {
    "tags": []
   },
   "outputs": [
    {
     "data": {
      "text/plain": [
       "<AxesSubplot:xlabel='LastRecordChange0x10'>"
      ]
     },
     "execution_count": 12,
     "metadata": {},
     "output_type": "execute_result"
    },
    {
     "data": {
      "image/png": "iVBORw0KGgoAAAANSUhEUgAAAYMAAAESCAYAAAAfXrn0AAAAOXRFWHRTb2Z0d2FyZQBNYXRwbG90bGliIHZlcnNpb24zLjQuMSwgaHR0cHM6Ly9tYXRwbG90bGliLm9yZy/Z1A+gAAAACXBIWXMAAAsTAAALEwEAmpwYAAAl7UlEQVR4nO3deZxcZZ3v8c+vqrqzQhbAKAmQqEEMuEFYZnAcHLwQxJlwFRXH0chFmXEFHV8a5zUzzLjjHTfckSA4MiKiXhGDMQSEgBLohJA9pEkM6axkTzrppap+94/zVHd1p6qrulJd1VX1fb9e9epTz1nqOXWqz+88y3mOuTsiItLYYtXOgIiIVJ+CgYiIKBiIiIiCgYiIoGAgIiIoGIiICJCodgZKdfLJJ/vUqVOrnQ0RkZqxdOnS3e5+Sq55NRsMpk6dSktLS7WzISJSM8xsc755qiYSEREFAxERUTAQEREUDEREBAUDERFBwUBERKjhYKCRt0VEyqdmg8HBju5qZ0FEpG7UbDAQEZHyUTAQEREFAxERUTAQEREUDEREBAUDERFBwUBERFAwEBERFAxERAQFAxERQcFARESo4WCgcepERMqnZoOBiIiUj4KBiIjUcDBQPZGISNnUbjAQEZGyUTAQEREFAxERUTAQEREUDEREhCKDgZl93MxWm9kqM/upmY00s2lmtsTMWs3sZ2bWHJYdEd63hvlTs7bzmZC+3swuz0qfFdJazWxu2fdSREQGVDAYmNlk4GPATHc/B4gD1wA3A19395cD+4DrwirXAftC+tfDcpjZjLDe2cAs4LtmFjezOPAd4ApgBvCusGwB6lsqIlIuxVYTJYBRZpYARgPbgb8B7g3z7wSuCtOzw3vC/EvNzEL63e7e6e6bgFbggvBqdfeN7t4F3B2WFRGRCikYDNx9K/BfwPNEQeAAsBTY7+7JsFgbMDlMTwa2hHWTYfmTstP7rZMvXUREKqSYaqIJRFfq04BTgTFE1TwVZ2bXm1mLmbUcPHSoGlkQEalLxVQTvQnY5O4vuHs38EvgYmB8qDYCmAJsDdNbgdMAwvxxwJ7s9H7r5Es/hrvf6u4z3X3miSecUETWRUSkGMUEg+eBi8xsdKj7vxRYAzwMXB2WmQP8OkzfF94T5j/k7h7Srwm9jaYB04EngaeA6aF3UjNRI/N9hTKl5mMRkdy+/8hztO07Mqh1imkzWELUELwMWBnWuRX4NPAJM2slahOYF1aZB5wU0j8BzA3bWQ3cQxRIfgd82N1ToV3hI8ACYC1wT1hWREQGadv+o3z5gXVc+6OnBrVeovAi4O43ATf1S95I1BOo/7IdwNvzbOcLwBdypM8H5heTFxERyS/tUb3Jka7UoNbTHcgiIqJgICIiCgYiIoKCgYiIoGAgIiIoGIiICAoGIiJ1xUu8I7d2g4FuQRYRKZvaDQYiIlI2CgYiIqJgICIiCgYiIoKCgYiIUMPBQJ2JRETKp2aDgYiIlI+CgYiIKBiIiIiCgYiIoGAgIiIoGIiICAoGIiKCgoGIiKBgICIiKBiIiAgKBiIiQg0HA41NJCJSPjUbDEREpHwUDERERMFAREQUDEREBAUDERFBwUBERFAwEBERajkY6EYDEZGyqd1gICIiZVNUMDCz8WZ2r5mtM7O1ZvYXZjbRzBaa2Ybwd0JY1szsFjNrNbMVZnZu1nbmhOU3mNmcrPTzzGxlWOcWM7PCuVLRQESkPy/x1FhsyeCbwO/c/SzgNcBaYC6wyN2nA4vCe4ArgOnhdT3wPQAzmwjcBFwIXADclAkgYZkPZK03q7TdERGRUhQMBmY2DngDMA/A3bvcfT8wG7gzLHYncFWYng382CNPAOPN7CXA5cBCd9/r7vuAhcCsMO9Ed3/C3R34cda2RERkELzEWpNiSgbTgBeAH5nZ02Z2m5mNASa5+/awzA5gUpieDGzJWr8tpA2U3pYj/Rhmdr2ZtZhZy+HD7UVkXUREilFMMEgA5wLfc/fXAe30VgkBEK7oh7wS391vdfeZ7j5zzNgxQ/1xIiINo5hg0Aa0ufuS8P5eouCwM1TxEP7uCvO3AqdlrT8lpA2UPiVHuoiIDNKQNSC7+w5gi5m9IiRdCqwB7gMyPYLmAL8O0/cB7w29ii4CDoTqpAXAZWY2ITQcXwYsCPMOmtlFoRfRe7O2JSIiFZAocrmPAneZWTOwEbiWKJDcY2bXAZuBd4Rl5wNvBlqBI2FZ3H2vmX0OeCos91l33xumPwTcAYwCHggvEREZpFLr64sKBu6+HJiZY9alOZZ14MN5tnM7cHuO9BbgnGLyIiIi5ac7kEVE6oiX2GigYCAiIgoGIiL1pNQ2AwUDERFRMBARqSdDPVCdiIjUMQUDEZG6ot5EIiJSIgUDEZE60nBtBnrOmYhIfsU8LzJbzQYDERE5lu4zEBGRktVuMFA9kYjIMRquzUBERMpHwUBEpI647jMQEZFSKRiIiNShwbYdKBiIiNQRNSCLiEgP3XQmItLAVDIQEZGSKRiIiNSRhutaqhuQRUTKp2aDgYiIHEttBiIiUjIFAxERUTAQEREFAxGRuqI2AxERKZmCgYhIHWm4+wxERKR8FAxEROqI2gxERKRkCgYiInWk1KF6ig4GZhY3s6fN7P7wfpqZLTGzVjP7mZk1h/QR4X1rmD81axufCenrzezyrPRZIa3VzOYWlSENTiQiUjaDKRncAKzNen8z8HV3fzmwD7gupF8H7AvpXw/LYWYzgGuAs4FZwHdDgIkD3wGuAGYA7wrLiojIIHmJjQZFBQMzmwJcCdwW3hvwN8C9YZE7gavC9OzwnjD/0rD8bOBud+90901AK3BBeLW6+0Z37wLuDsuKiDSM1dsOsOtQR9U+v9iSwTeATwHp8P4kYL+7J8P7NmBymJ4MbAEI8w+E5XvS+62TL/0YZna9mbWYWUv7kfYisy4iMvxdectjXPrVR457O0PWZmBmbwF2ufvSEj+jbNz9Vnef6e4zR48eXe3siIiU1aGOZOGFijTYZyAniljmYuDvzOzNwEjgROCbwHgzS4Sr/ynA1rD8VuA0oM3MEsA4YE9Wekb2OvnSRUSkBINtOihYMnD3z7j7FHefStQA/JC7vxt4GLg6LDYH+HWYvi+8J8x/yKMWjfuAa0Jvo2nAdOBJ4Clgeuid1Bw+477B7YaIiEDpN50VUzLI59PA3Wb2eeBpYF5Inwf8t5m1AnuJTu64+2ozuwdYAySBD7t7CsDMPgIsAOLA7e6++jjyJSIigzSoYODufwD+EKY3EvUE6r9MB/D2POt/AfhCjvT5wPzB5EVERHLRQHUiIlIiBQMRkTqigepERKRkCgYiInVkyAeqExGR2jHYm84UDERE6ojaDEREpGQKBiIidWRIh7AWEZH6VrPBQA86ExE5lnoTiYhIyRQMRETqiHoTiYhIyRQMRETqiGvUUhERKZWCgYhIPVGbgYiIlKp2g4FuNBARKZvaDQYiInIM3XQmIiIlUzAQEamyUgeXy72t0tZTMBARqbIyxoKSKRiIiFTYyrYDHDja3fO+nLFAN52JiNSIv/32Y8y5/cme9+WsJipVzQaD6n91IiKDlznxL9+yvzetrNsvbb2aDQYiIrUoPUyvZBUMREQqKFeVUDlriXSfgYhIDch1si610becGiIYHO5M8o0HnyWZSlc7KyLS4NJDXTIocWMNEQwe2/AC33hwA+t2HKp2VkSkwVWq49CWvUf54vy1RS/fEMGgMxmVCIZB7y0RkWMMVZvBrY9uLHq9xgoGw6BeTkQaW85qomFwbmqoYDBcu3SJSOPIVQooa62F7jPIr6unmkjRQESqa7iehQoGAzM7zcweNrM1ZrbazG4I6RPNbKGZbQh/J4R0M7NbzKzVzFaY2blZ25oTlt9gZnOy0s8zs5VhnVvMzMq5k10qGYhIFaXSzu9Wbcfdc99nUMbPGsqxiZLAP7v7DOAi4MNmNgOYCyxy9+nAovAe4ApgenhdD3wPouAB3ARcCFwA3JQJIGGZD2StN6ukvcmjM5kKU4oGIlJ5P1y8kX/6yTLuX7E950XpcKi1KBgM3H27uy8L04eAtcBkYDZwZ1jsTuCqMD0b+LFHngDGm9lLgMuBhe6+1933AQuBWWHeie7+hEffyI+ztlUWKhmISDVt338UgD2HO3Nek9bc2ERmNhV4HbAEmOTu28OsHcCkMD0Z2JK1WltIGyi9LUf6gAZTFOpS11IRGSZynbuGw7mp6GBgZmOBXwA3uvvB7Hnhin7Id8fMrjezFjNr6TjSUfR6nWpAFpFhImcNxTA4NRUVDMysiSgQ3OXuvwzJO0MVD+HvrpC+FTgta/UpIW2g9Ck50o/h7re6+0x3nzly9Mhisg6omkhEho/cDcg18NjL0LNnHrDW3b+WNes+INMjaA7w66z094ZeRRcBB0J10gLgMjObEBqOLwMWhHkHzeyi8FnvzdpWfoPY4a6UbjoTkeEhZ8FgGJyaEkUsczHwHmClmS0Paf8CfBm4x8yuAzYD7wjz5gNvBlqBI8C1AO6+18w+BzwVlvusu+8N0x8C7gBGAQ+EV9lkehMNhy9cRBpb7juQy6fUbRUMBu7+GJCv3/+lOZZ34MN5tnU7cHuO9BbgnEJ5KZUakEVk2Bim56GGuAO5dziKYXoURKRh5K4mKmebgYawzqt3oDoRkeoa6mqiUjVEMOhSyUBEhomhHqhOj70cQKZkMCzCr1TE08/vY+rc37J0875qZ0WkDz32soq6Qm8ilQwaxyPPvtDnr0ilPLRuJ1Pn/pZ97V09adlnnpx1+mV97GVp6zVGMEipN5GIVMb3/xA9XWzDrsM55w9xLChZQwSDzm41IItIZSTT0fkmnufsOpg2g2XP7+Orv18/yByoN1FemZKBqolEZKilwrg38Vju0+tg2gfe+t0/8q2HWsuSr0IaIxjopjMRqZBkCAaJWO57dXM+z6AWxiYargazvxq1VEQqpbdkkDsY5ByorsCpqRLnrpoNBsVKpb3n4CgUiMhQSxYYHrmUEawHEwt0n0EemSoiUJuBiAy9dAgGuc43ZpanZDDwuSmlksHx633+sdoMRGToZUoGuXsNeUl3IA/mQrbh2gyKpZKBSOV1JdN888ENtHcmq52ViksW6L1YylkonS68zPGq+2DQmazAtygifbT8eS9ff/BZnti4p9pZqbhMySCVo+3AzHIPVFfOkoHuM8itUyUDkYpr238UKNyYWo8y55mcXUjzVBMVojaDMsiuJlIsEKmMrfuiYJBuwGDQ22aQp5qohPsMfBAVHPnOc4Uaqes/GKSySwZVzIhIA9nawCWDVCp/yaDUaqJylAzuXdo24Py6Dwad3dm9iRrvhylSDT0lgwb8n8vsca42g7ylhQLbLPZ7XLfjYN5lC22j4DOQa112yaDxfpYi1ZEpGeQ6Ida7zAl/UNVEORIPdnT3TBdT3bZq6wHe8q3HeMWkE3LOL1RKq9lgUOwFR982g8b7YYpUWjrtbD/QuMEgs8v5qolytQ/0T+lOpXn1f/z+mG0OZFsIwOt3HuqTfqQryabd7QWPRc1WE+070lV4Ifr2JlIsEBl6uw510t1Tb+7sOdzZUF1MMyf73G0DnqeXUd/3Xf26xB9Pm8GH7lrGlbc8RntnasDlajYYFKvvTWdVzIhIg9i6/0jPdCoN77z1Ca659Ykq5qiyMuftfCfw3DUUfdP6B5JMNdGKtv1c9MVFfZ6iVsjjrbuBvqMx5FLTwaCYImifaiK1GogMubbQeAyQSqdpDU/8apQqo8x5PNdJP6omyr9ORv/vKhMclm7ex46DHew42FF0fjKltI7ugfun1nQwONo9cKSDvtGwQX6LIlWVaTyGvie1ZCXGVBgGeqqJcuxudNNZ4RNR5gSekfkaM+0C/auRilHXJYMjXYXHPekzHIUaDUSG3NZ9R2mKR2P5Z5/TkqnG+P/LnGZythmQpzdRv/f9SwaZ99sORCWC2d95fND5KjQ0T20HgwINIqCbzkQqbev+o0wePwro2yWyYYJB+Jvv5rJiqon6l6IypYltWaWuweooUJNS28Ggq4hqou6h61ramUzxpQfWsncQjTmV9tC6nT0NSCKVsHXfUU4/aQzQtxG1uwLVRHsOd7J+x6EBl1m97QAPrNw+ZHkYaGyitHvOewb6t2f2D5yZ73H7/uLbCvqr65JBexHVRENZMnhy015+8MhGHhvGJ9v/c0cL775tScnruzs7B9FYJY3N3dm6/yinT4xKBqkKlwxmfXMxl3/j0QGXufKWx/jgXcuGLA8DVhMVXTLo35souvdg56H8/4uFvt3Oei4ZHMq6Qy+fvr2JBvaTJzYzde5vCxanMla0HTjmM+rNw+t3cdGXFrGkgfqJS+n2HenmSFeK0yeOBvpVE1WgZPDCoc4h/4xi5XvwfTEPt8nVm2jnwY4Bmz0L1XzUdcngUEcxDcipnsasQl/WZ+9fA/S9DXwgq7Ye6PmMerVk017c4au/f1Z3cEtBmTGJMsEg2YBtBhnZgbC3tJD7PNS/mqg71ffEnXZnW4EqolSBWNtZz11LDx4trmQwMhEHCncmylzhF/rSMhqhZLBiywFiBk/+ee+wrg6T4SEzDMWpmQZkr2zJoOezCp0ZiRpUh7IKNFc1Udpz3+1UuGRQuPG40PfbUc9dSw92JFm4Zif/d8G6vMt0JdOMaArBoMibzoq50t9zuLOnP3W9Pk0tnXZWbT3A1edN4dRxI2uqdNCTzRrJb73YfTjqTHHKCSNIxKzPSa1/3/mh1FVEMPjgT5Zy4RcXDdlvOvt8blHlRNRmUMTH9W8zSKWdbQcGDgaFbuqr+5LBF+ev5c4/bs67TGcyzYhEtJsDfVfZRbpCd+oBrAxVRFC/JYNNe9o51Jlk5hkT+eil01m+ZT8Pr99V7Wz1WLB6R9464p6RIyuZIWHP4eh4TBzTTCxmfXoTVfIO5GL+Jx9e/wJQ3P97KbJLBtl3JRczHHX/ko27F1EyGHi7dV0yeHDtTjbtbudwZzLvEK9dyTQjm6LdHOgYZN/eXUwDcqa9wKx+2wxWhmqwV00Zx9XnTeH0iaP52sLhUTo43JnkH/97Kdfd+VTO+b0jR1Y/r41kT3sXJ4xMMCIRJ27W5/+yfz34UBpMaf1wZ+G2x1LkOieli+xNlOums+37O5gwuinv59VNycDMZpnZejNrNbO5xazz3AvtPdP5upl2pdKMDNVEA50YNu/pHVyrmCuFNdsPcsZJoxmZiA/bksHxnrSfadvPyKYY0180lqZ4jI9dOp1VWw+yYPXOMuWwdJmBup4L4970N1Bfbxk6Lxzu5JSxIwCIx6xPo+ZQP/UsO9gU2+4H0D5UwSBvNVERDcg52gyiLruje9fpt51C329NDEdhZnHgO8AVwAzgXWY2Y6B1RoUT/MQxzcCxPYt2Huzg9Tc/xOINu3uCwUA27+kNLNfe8WSf8VVy2ba/g9MmjCYeM364eBOfu39Nz5XAtv1H2XUcDVOrth7g+azgVKr9R4rrFZXPyrYDnH3qOBLx6Gdy1WtP5aUnj+HrC5+t+rNtC+1bqicYKBpU0p7DnZw0NvqfjFk0UF3GYEsGuw518A+3LWHNtoPHpC/e8AIr2vazZe+RniqVw1nngK5U8aX14y0ZbNrdzsI1x14g5aomSruzaXf7McseWzLI1Zuo92Y+6D35X/TFRXz4f5aRKvD9FrrIHS4Pt7kAaHX3jQBmdjcwG1iTb4V4LAq177noDL65aAM//tNmTh7bjIUQ/JtntvWMnpg5KPMe28Tuw510JdNMGN3MoY5uVmw9wCVnvoiWzXt7tt2dcq68ZTHvf/00RjbFSbvTlUzTlYr+dqfSLN+yn7edO6XnhzTvsU08v/cIr5o8jtsWb+RgR5K3njuZJ0PXzLNPPZEZp57I2BG9X3kmrwBb9h5h9+FOzj51HF9ZsA53eMfMKZyZ56lFxfjSA70N69/7w3M8vG4XM049kVHNcXYf6mT86CZePG5U3vVXbTvAuy44ved9Ih7jhjdN54a7l/PZ+9cwZUL+dYdaZnz89q4UX/ndOhxoihlN8RiJeIwfh3akpX/ex7cf2oCZETMjHoOYGWaGDbB9Kc2m3e287rQJQPQ/uirrRP6l+evYtLudC6dN5NwzJmAG97a0Me3kMVz88pPpSKb42VNbuGjaSUyfNJYH1+7kiY17ueHup3njWS9iZFOcR599geVb9vf5zJeeMoZ3nX96n/uO7mlpY9KJI4vK871L21iyKfr/d3d+9fRWJo5p5i9fdjKOMyIx8MXk50KX9H+98pXEsv6nH2/dTUd3irQ7i9ZGwWLZ8/tYvKG3V94PH90I0KdxeN5jm1i4Zkefz8icU04d37tPtyzawJgRCXYc7OC3K7YXrKEoNLCnDYf6XzO7Gpjl7u8P798DXOjuH+m33PXA9QATJ087711fuZcPXvIyZn/78WOKSE1xIxGLcbQ7xbUXT2XR2l08v/cIY5rjjGiKc+BoN0bfotWZk8by7M7DfPCSl/HI+hdYs73vFQlAczxGcyLG4c4kn7/qHH7zzDb+vKedd55/Oj945Lk+dZXjRzdx0bSTaErEWL31ABtzXBFkjGyK9YncrzltPGu3HSyqV0Q+ZrnbSZrixsQxzexr7y64/XlzZnLpKyf1vE+nndnfebxPA3q1JWLRif54vispnxvfNJ0b33Qms7/9GM+0Hfs7mTJhVJ9hrvMxg7EjEn1K/a+ZMo43vXIS550xgfauqGvodx9u7RnArZ7FDObNOZ9r78jdTlaMzTe/Zam7z8w1r6aCQbaZM2d6S0sLEDX4dqfSUR2dAxadtEc2xehMRm0GqbTT0Z1idHMcs6jLWzKdJmbW02A8ujmBAbGY4e60d6VIpZ1EuOJsilufq3mIGm3cvacqJZlKk0w7IxIx3KNtZXR0p3pOWH2+doexIxOk0s7R7hTN8RijmuN0JlMDRvtCR25UU5xEzHr2I9OQ3hyPYWZ0JdMDXi0kYsaYEccWHpOpNEeKvEt7IMd7ZZ4ptY3ouY/ESaWd7pTTnU4zqilqxEyFHhzpdFRKTLnjihtDw+DEkQnMrOd3EjcjHouC9ZjmBDGLGni7U2nGjkhwsCPZ82Me0RQj7U4y7cQt+v11JdM9d+7mqvLNfI57dKFjFL4wGNUUpyOZoikWO2bZpnh0fii2d3LmptZM19mYQXMiuriLGaFUCk3x6OI0EYu+j3Q6qs7MnIOb4rE+F5MjErHoN552DnUme95DVLUVM+hOOom4Rb9vjy4q02l6/tePdKWIh/MXQCIeyxsMhks10VbgtKz3U0JaUUY2xfO2C2TS4/1ObPGYEY9F8zJfVDYz61Olk09UXdV7WkvEY2RKlf3ixoD5zGyrOdGblxGJeMEiajHy7UdzItbn84qViMc4Mcd3Vm1mRiJuJOIwit7vLaYKoaro/zvJ/u1n/y+MG5W/hwxQ8Dea6/eYffwLbbeYZUuR638317kmW67zQyxmx3xHPf/TzQPnIdfFXD7D5T/6KWC6mU0zs2bgGuC+KudJRKRhDIuSgbsnzewjwAIgDtzu7qurnC0RkYYxLIIBgLvPB+ZXOx8iIo1ouFQTiYhIFSkYiIiIgoGIiCgYiIgIw+Sms1KY2SFgfY5Z44BCt8cWs0w5t1XJZU4GinkKTaFtVTLPlf684bYMFHfchlu+G/03UovH7BXunnuMGw93wNXaC2jJk35rEesWXKac26rwMjm/l8Fuq5J5HqbfY6X3v+BxG2751m+kJo9Z3jzXYzXRb8q0TDm3VcllilVoW5XO83D7HmvxmNXzMpX+vHIdt5rJcy1XE7V4njE2Gpm+l9qk41Z7avGYDZTnWi4Z3FrtDAxT+l5qk45b7anFY5Y3zzVbMhARkfKp5ZJB0cws97MRe+f/wcxqqrhX73TMapOOW+1qiGAgIiIDa5hgYGaXmNn9We+/bWbvq2KWjkuhK7B6UG/HDHTcalEjHDNooGAgIiL5KRjUMDMba2aLzGyZma00s9khfaqZrTWzH5rZajP7vZlV7+n10oeOW+1phGPWSMEgSd/9HVmtjJRRB/C/3f1c4I3AV633Ic3Tge+4+9nAfuBt1cnicanHYwY6brWo3o9ZQwWDzcAMMxthZuOBS6ucn3Iw4ItmtgJ4EJgMTArzNrn78jC9FJha8dwdv3o8ZqDjVovq/ZgNnyedDRUzSwCd7r7FzO4BVgGbgKerm7OyeDdwCnCeu3eb2Z/pvQrrzFouBdRM0bXOjxnouNWiujxm2eo+GABnA88BuPungE/1X8DdL6lwnsplHLAr/DjfCJxR7QyVST0fM9Bxq0X1esx61HUwMLN/Aj4G3FjlrJRV5goMuAv4jZmtBFqAdVXNWBnU6zEDHbdaVM/HrD8NR1GDzOw1wA/d/YJq50WKp+NWexrpmDVSA3JdCFdgPwX+tdp5keLpuNWeRjtmKhmIiIhKBrXAzE4zs4fNbE24seWGkD7RzBaa2Ybwd0JIP8vM/mRmnWb2yX7busHMVoXt3FiF3WkIJRyzd5vZinBD0x9D9URmW7PMbL2ZtZrZ3GrtU70r8zG73cx2mdmqau3PoBXzuDm9qvsCXgKcG6ZPAJ4FZgBfAeaG9LnAzWH6RcD5wBeAT2Zt5xyi7n6jiToPPAi8vNr7V4+vEo7ZXwITwvQVwJIwHSfqofNSoBl4BphR7f2rx1e5jll4/wbgXGBVtfer2JdKBjXA3be7+7IwfQhYS3TTy2zgzrDYncBVYZld7v4U0N1vU68k+sEecfck8Ajw1qHfg8ZTwjH7o7vvC+lPAFPC9AVAq7tvdPcu4O6wDSmzMh4z3P1RYG9lcl4eCgY1xsymAq8DlgCT3H17mLWD3jsi81kF/JWZnWRmo4E3A6cNVV4lUsIxuw54IExPBrZkzWsLaTKEjvOY1aS6vs+g3pjZWOAXwI3ufrB3aBRwdzezAXsDuPtaM7sZ+D3QDiwnumNShshgj1m4oek64PUVzaj0aNRjppJBjTCzJqIf6F3u/suQvNPMXhLmvwTYVWg77j7P3c9z9zcA+4jqRWUIDPaYmdmrgduA2e6+JyRvpW/pbUpIkyFQpmNWkxQMakAYHXEesNbdv5Y16z5gTpieA/y6iG29KPw9nai94H/Km1uBwR+zcDx+CbzH3bMD9FPAdDObZmbNwDVhG1JmZTxmNUn3GdQAM3s9sBhYCaRD8r8Q1WfeA5xONFLkO9x9r5m9mOiW+RPD8oeJeqAcNLPFwElEjcufcPdFFd2ZBlHCMbuNaOjjzWHZpLvPDNt6M/ANop5Ft7v7Fyq1H42kzMfsp8AlwMnATuAmd59XoV0piYKBiIiomkhERBQMREQEBQMREUHBQEREUDAQEREUDKSCzOzwca4/1cz+Puv9JWZ2wMyWm9k6M/uv48/loPLzBzPLdCUca2Y/MLPnzGxpmHdhyHPVRq7MN+LmAMu/wcyWmVnSzK7uN29O2M4GM5uTbxtSmxQMpJZMBf6+X9pid38t0TgybzGzi4figy16/OFAbiMamGy6u58HXEvUx7za5gKL3H06sCi8H8jzwPvodzOimU0EbgIuJBo876ZCgUVqi4KBVJWZ/a2ZLTGzp83sQTObFNL/OlzxLw/zTgC+TDTQ3nIz+3j2dtz9KNFYS5PD+pdZ9EyHZWb28zDeDGZ2fhh7/hkze9LMTjCzkWb2ozAu/dNhrBnM7H1mdp+ZPQQsMrNRZna3ma01s18Bo8JyLyM6Sf6ru6dDfja5+29D9uJm9kOLxsj/vZll1vuAmT0V8vILiwYPxMzuMLNbQj43Zq7QzSxmZt8NpaCFZjY/a955ZvZIKJUsyAyfQJ4RN83sm2b272H6cjN71Mxi7v5nd19B701XGZcDC919bxipcyEwq5RjLsNUtcfQ1qtxXsDhHGkT6L358f3AV8P0b4CLw/RYokEVLwHuz1q3533YzlLgxURX5I8CY8K8TwP/TvQ8gI3A+SH9xLDdfya6sxfgLKKr45FEV8htwMQw7xNZy70aSAIzgb8DfpVnn6eG5V4b3t8D/EOYPilruc8DHw3TdwA/J7pYm0E0hDXA1cD8kP5iorGlrgaagD8Cp4Tl3pmVz/1Zn2GZ90TPtFgNvBFYD7ysX77vAK7Oev9JomCXef9vZD0rQ6/af2nUUqm2KcDPwpVsM7AppD8OfM3M7gJ+6e5tljV6ZJa/MrNngOnAN9x9h5m9hegk+nhYpxn4E/AKYLtHz3rA3Q9CzzAE3wpp68xsM3Bm2P5Cd8+MS/8G4Jaw3AozW1HkPm5y9+VheilRgAA4x8w+D4wnCngLstb5fx6VMtZkSktEo2L+PKTvMLOHQ/oriB5ctDDsbxzYTj/uvSNuuvsRM/sAUdD8uLs/V+S+SJ1SNZFU27eAb7v7q4B/JLoix92/TFRSGEV0Uj8rz/qL3f01wNnAdWb2WqIr4IXu/trwmuHu15WYv/YillkNvMbM4nnmd2ZNp+gdOv4O4CNh3/+TsO851skZBfvNX521v69y98vCvIFGtn0VsAc4tcD2QaOn1j0FA6m2cfSeVHp6qJjZy9x9pbvfTDRy51nAIaLHER7D3TcRtSl8muipUxeb2cvDtsaY2ZlE1SEvMbPzQ/oJoWF4MfDukHYm0YBk63N8zKOEBmwzO4eoqohwVd0C/KeFS/PQi+jKAvt+ArDdomGT311gWYhKS28LbQeTiKrJCHk9xcz+Inx2k5mdHeblG3HzDKLqsdcBV5jZhQU+ewFwmZlNCA3Hl9G3JCM1TsFAKmm0mbVlvT4B/AfwczNbCuzOWvZGM1sVqmK6iZ4itQJIhQbXjx+zdfg+UVXOGKL6/p+G9f8EnOXRYyPfCXwrVC0tJLoa/y4QM7OVwM+A97l7Z47tfw8Ya2Zrgc8SVflkvJ/oCVitFnUlvYPCz5f4N6IRMR8H1hVYFqJx9tuANcBPgGXAgbBfVwM3h/1aTvR8XogC5P8ysw3Am4Avh4A1j6jOfxvRg1luCw3p55tZG/B24AdmthogVJV9jigwPwV8Nqv6TOqARi0VqSFmNtbdD5vZScCTRI3sO6qdL6l9akAWqS33m9l4okbxzykQSLmoZCAiImozEBERBQMREUHBQEREUDAQEREUDEREBAUDEREB/j9VIUczeoOG6QAAAABJRU5ErkJggg==\n",
      "text/plain": [
       "<Figure size 432x288 with 1 Axes>"
      ]
     },
     "metadata": {
      "needs_background": "light"
     },
     "output_type": "display_data"
    }
   ],
   "source": [
    "import matplotlib.pyplot as plt\n",
    "s.plot()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 15,
   "id": "c94f4f54-beb5-458f-9d71-80baa122a40a",
   "metadata": {},
   "outputs": [],
   "source": [
    "s1 = s.loc['2021-05-18 23:00:00':'2021-05-29 00:00:00']"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 16,
   "id": "882be659-c087-4c93-bb1a-721b00bd4723",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "<AxesSubplot:xlabel='LastRecordChange0x10'>"
      ]
     },
     "execution_count": 16,
     "metadata": {},
     "output_type": "execute_result"
    },
    {
     "data": {
      "image/png": "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\n",
      "text/plain": [
       "<Figure size 432x288 with 1 Axes>"
      ]
     },
     "metadata": {
      "needs_background": "light"
     },
     "output_type": "display_data"
    }
   ],
   "source": [
    "s1.plot()"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "b036942d",
   "metadata": {},
   "source": [
    "### Most repeated names"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 17,
   "id": "ceae7c0d",
   "metadata": {},
   "outputs": [],
   "source": [
    "data_filtered = data[(data['LastModified0x10'] > \"2021-01-01\") & (data['LastModified0x10'] < \"2021-05-30\")]\n",
    "names = data_filtered[\"FileName\"].value_counts()"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 20,
   "id": "d2211480-e303-49ed-a331-372ffc71049c",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "3lvnvt-readme.txt    1183\n",
       "ui-strings.js        1017\n",
       "messages.json         488\n",
       "Report.wer            384\n",
       "mpuxagent.dll.mui     252\n",
       "Name: FileName, dtype: int64"
      ]
     },
     "execution_count": 20,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "names.nlargest()"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "bf35d03f",
   "metadata": {},
   "source": [
    "### Filenames that contains \"readme\""
   ]
  },
  {
   "cell_type": "code",
   "execution_count": null,
   "id": "a1c0defc",
   "metadata": {
    "tags": []
   },
   "outputs": [],
   "source": [
    "readme = data[(data[\"FileName\"].str.contains(\"readme\")) & (data['LastModified0x10'] > \"2021-05-21\") & (data['LastModified0x10'] < \"2021-05-27\")]\n",
    "readme.sort_values(by='LastModified0x10', ascending=True)"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "86f2fcdf-aacb-48d9-bdf0-93a210382035",
   "metadata": {},
   "source": [
    "### Most used extension files"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 24,
   "id": "52df55be-f856-4460-b986-0136d0aeaeb0",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/plain": [
       "Extension\n",
       ".3lvnvt    2357\n",
       ".txt       1203\n",
       ".log        475\n",
       ".json       470\n",
       ".evtx       278\n",
       "dtype: int64"
      ]
     },
     "execution_count": 24,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "data[(data['LastModified0x10'] > \"2021-05-21\") & (data['LastModified0x10'] < \"2021-05-27\")].groupby(\"Extension\").size().nlargest()"
   ]
  },
  {
   "cell_type": "markdown",
   "id": "236f3e4b",
   "metadata": {},
   "source": [
    "### Executables created after first ransom note was created"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 25,
   "id": "ae36b47b",
   "metadata": {},
   "outputs": [],
   "source": [
    "first_note = readme1.sort_values(by=\"LastModified0x10\", ascending=True).iloc[0][\"LastModified0x10\"]\n",
    "range_exe = first_note + pd.offsets.Hour(-12)"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 26,
   "id": "49620952",
   "metadata": {
    "scrolled": true
   },
   "outputs": [],
   "source": [
    "data_filtered = data[(data['Created0x10'] > \"2021-05-22\") & (data['Created0x10'] < \"2021-05-25\")]\n",
    "files = data_filtered[data_filtered[\"FileName\"].str.contains(\"\\.exe|\\.ps1|\\.msi|\\.vba\", regex=True)]"
   ]
  },
  {
   "cell_type": "code",
   "execution_count": 27,
   "id": "cdf34021-246a-4767-8ad9-fbc9994fc6e4",
   "metadata": {},
   "outputs": [
    {
     "data": {
      "text/html": [
       "<div>\n",
       "<style scoped>\n",
       "    .dataframe tbody tr th:only-of-type {\n",
       "        vertical-align: middle;\n",
       "    }\n",
       "\n",
       "    .dataframe tbody tr th {\n",
       "        vertical-align: top;\n",
       "    }\n",
       "\n",
       "    .dataframe thead th {\n",
       "        text-align: right;\n",
       "    }\n",
       "</style>\n",
       "<table border=\"1\" class=\"dataframe\">\n",
       "  <thead>\n",
       "    <tr style=\"text-align: right;\">\n",
       "      <th></th>\n",
       "      <th>SequenceNumber</th>\n",
       "      <th>InUse</th>\n",
       "      <th>ParentEntryNumber</th>\n",
       "      <th>ParentSequenceNumber</th>\n",
       "      <th>ParentPath</th>\n",
       "      <th>FileName</th>\n",
       "      <th>Extension</th>\n",
       "      <th>FileSize</th>\n",
       "      <th>ReferenceCount</th>\n",
       "      <th>ReparseTarget</th>\n",
       "      <th>IsDirectory</th>\n",
       "      <th>HasAds</th>\n",
       "      <th>IsAds</th>\n",
       "      <th>SI&lt;FN</th>\n",
       "      <th>uSecZeros</th>\n",
       "      <th>Copied</th>\n",
       "      <th>SiFlags</th>\n",
       "      <th>NameType</th>\n",
       "      <th>Created0x10</th>\n",
       "      <th>Created0x30</th>\n",
       "      <th>LastModified0x10</th>\n",
       "      <th>LastModified0x30</th>\n",
       "      <th>LastRecordChange0x10</th>\n",
       "      <th>LastRecordChange0x30</th>\n",
       "      <th>LastAccess0x10</th>\n",
       "      <th>LastAccess0x30</th>\n",
       "      <th>UpdateSequenceNumber</th>\n",
       "      <th>LogfileSequenceNumber</th>\n",
       "      <th>SecurityId</th>\n",
       "      <th>ObjectIdFileDroid</th>\n",
       "      <th>LoggedUtilStream</th>\n",
       "      <th>ZoneIdContents</th>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>EntryNumber</th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "      <th></th>\n",
       "    </tr>\n",
       "  </thead>\n",
       "  <tbody>\n",
       "    <tr>\n",
       "      <th>110904</th>\n",
       "      <td>273</td>\n",
       "      <td>True</td>\n",
       "      <td>33365</td>\n",
       "      <td>146</td>\n",
       "      <td>.\\Temp</td>\n",
       "      <td>mm903fv092v33fj.ps1.3lvnvt</td>\n",
       "      <td>.3lvnvt</td>\n",
       "      <td>348539</td>\n",
       "      <td>1</td>\n",
       "      <td>NaN</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>Archive</td>\n",
       "      <td>Windows</td>\n",
       "      <td>2021-05-24 07:01:46.935530500</td>\n",
       "      <td>NaT</td>\n",
       "      <td>2021-05-24 07:04:24.860815800</td>\n",
       "      <td>NaT</td>\n",
       "      <td>2021-05-25 08:12:02.792699800</td>\n",
       "      <td>2021-05-24 07:04:24.896892400</td>\n",
       "      <td>2021-05-24 07:01:46.9355305</td>\n",
       "      <td>NaN</td>\n",
       "      <td>32523174816</td>\n",
       "      <td>183059500486</td>\n",
       "      <td>522</td>\n",
       "      <td>NaN</td>\n",
       "      <td>NaN</td>\n",
       "      <td>NaN</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>116957</th>\n",
       "      <td>537</td>\n",
       "      <td>True</td>\n",
       "      <td>33365</td>\n",
       "      <td>146</td>\n",
       "      <td>.\\Temp</td>\n",
       "      <td>mm903fv092v33fj.exe</td>\n",
       "      <td>.exe</td>\n",
       "      <td>124928</td>\n",
       "      <td>1</td>\n",
       "      <td>NaN</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>Archive</td>\n",
       "      <td>Windows</td>\n",
       "      <td>2021-05-24 07:09:45.756927300</td>\n",
       "      <td>NaT</td>\n",
       "      <td>2021-05-24 07:09:45.757932700</td>\n",
       "      <td>NaT</td>\n",
       "      <td>2021-05-25 08:12:02.777115200</td>\n",
       "      <td>2021-05-24 07:09:45.757932700</td>\n",
       "      <td>2021-05-24 07:09:45.7569273</td>\n",
       "      <td>NaN</td>\n",
       "      <td>32523174488</td>\n",
       "      <td>183059499899</td>\n",
       "      <td>522</td>\n",
       "      <td>NaN</td>\n",
       "      <td>NaN</td>\n",
       "      <td>NaN</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>117171</th>\n",
       "      <td>44</td>\n",
       "      <td>True</td>\n",
       "      <td>33365</td>\n",
       "      <td>146</td>\n",
       "      <td>.\\Temp</td>\n",
       "      <td>sender.exe</td>\n",
       "      <td>.exe</td>\n",
       "      <td>36352</td>\n",
       "      <td>1</td>\n",
       "      <td>NaN</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>Archive</td>\n",
       "      <td>DosWindows</td>\n",
       "      <td>2021-05-24 07:25:18.807582400</td>\n",
       "      <td>NaT</td>\n",
       "      <td>2021-05-24 07:25:18.808585400</td>\n",
       "      <td>NaT</td>\n",
       "      <td>2021-05-25 08:12:02.792699800</td>\n",
       "      <td>2021-05-24 07:25:18.808585400</td>\n",
       "      <td>2021-05-24 07:25:18.8075824</td>\n",
       "      <td>NaN</td>\n",
       "      <td>32523175784</td>\n",
       "      <td>183059502709</td>\n",
       "      <td>522</td>\n",
       "      <td>NaN</td>\n",
       "      <td>NaN</td>\n",
       "      <td>NaN</td>\n",
       "    </tr>\n",
       "    <tr>\n",
       "      <th>117178</th>\n",
       "      <td>57</td>\n",
       "      <td>True</td>\n",
       "      <td>106507</td>\n",
       "      <td>1</td>\n",
       "      <td>.\\Users\\user\\AppData\\Local\\Microsoft_Corpo...</td>\n",
       "      <td>PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpeb...</td>\n",
       "      <td>NaN</td>\n",
       "      <td>0</td>\n",
       "      <td>1</td>\n",
       "      <td>NaN</td>\n",
       "      <td>True</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>False</td>\n",
       "      <td>None</td>\n",
       "      <td>Windows</td>\n",
       "      <td>2021-05-24 07:37:25.344780300</td>\n",
       "      <td>NaT</td>\n",
       "      <td>2021-05-24 07:37:25.345783800</td>\n",
       "      <td>2021-05-24 07:37:25.344780300</td>\n",
       "      <td>2021-05-25 08:12:25.573868400</td>\n",
       "      <td>2021-05-24 07:37:25.344780300</td>\n",
       "      <td>2021-05-24 07:37:25.3457838</td>\n",
       "      <td>2021-05-24 07:37:25.3447803</td>\n",
       "      <td>32524116232</td>\n",
       "      <td>183060749720</td>\n",
       "      <td>2072</td>\n",
       "      <td>NaN</td>\n",
       "      <td>NaN</td>\n",
       "      <td>NaN</td>\n",
       "    </tr>\n",
       "  </tbody>\n",
       "</table>\n",
       "</div>"
      ],
      "text/plain": [
       "             SequenceNumber  InUse  ParentEntryNumber  ParentSequenceNumber  \\\n",
       "EntryNumber                                                                   \n",
       "110904                  273   True              33365                   146   \n",
       "116957                  537   True              33365                   146   \n",
       "117171                   44   True              33365                   146   \n",
       "117178                   57   True             106507                     1   \n",
       "\n",
       "                                                    ParentPath  \\\n",
       "EntryNumber                                                      \n",
       "110904                                                .\\Temp   \n",
       "116957                                                .\\Temp   \n",
       "117171                                                .\\Temp   \n",
       "117178       .\\Users\\user\\AppData\\Local\\Microsoft_Corpo...   \n",
       "\n",
       "                                                      FileName Extension  \\\n",
       "EntryNumber                                                                \n",
       "110904                              mm903fv092v33fj.ps1.3lvnvt   .3lvnvt   \n",
       "116957                                     mm903fv092v33fj.exe      .exe   \n",
       "117171                                              sender.exe      .exe   \n",
       "117178       PowerShell_ISE.exe_StrongName_lw2v2vm3wmtzzpeb...       NaN   \n",
       "\n",
       "             FileSize  ReferenceCount ReparseTarget  IsDirectory  HasAds  \\\n",
       "EntryNumber                                                                \n",
       "110904         348539               1           NaN        False   False   \n",
       "116957         124928               1           NaN        False   False   \n",
       "117171          36352               1           NaN        False   False   \n",
       "117178              0               1           NaN         True   False   \n",
       "\n",
       "             IsAds  SI<FN  uSecZeros  Copied  SiFlags    NameType  \\\n",
       "EntryNumber                                                         \n",
       "110904       False  False      False   False  Archive     Windows   \n",
       "116957       False  False      False   False  Archive     Windows   \n",
       "117171       False  False      False   False  Archive  DosWindows   \n",
       "117178       False  False      False   False     None     Windows   \n",
       "\n",
       "                              Created0x10 Created0x30  \\\n",
       "EntryNumber                                             \n",
       "110904      2021-05-24 07:01:46.935530500         NaT   \n",
       "116957      2021-05-24 07:09:45.756927300         NaT   \n",
       "117171      2021-05-24 07:25:18.807582400         NaT   \n",
       "117178      2021-05-24 07:37:25.344780300         NaT   \n",
       "\n",
       "                         LastModified0x10              LastModified0x30  \\\n",
       "EntryNumber                                                               \n",
       "110904      2021-05-24 07:04:24.860815800                           NaT   \n",
       "116957      2021-05-24 07:09:45.757932700                           NaT   \n",
       "117171      2021-05-24 07:25:18.808585400                           NaT   \n",
       "117178      2021-05-24 07:37:25.345783800 2021-05-24 07:37:25.344780300   \n",
       "\n",
       "                     LastRecordChange0x10          LastRecordChange0x30  \\\n",
       "EntryNumber                                                               \n",
       "110904      2021-05-25 08:12:02.792699800 2021-05-24 07:04:24.896892400   \n",
       "116957      2021-05-25 08:12:02.777115200 2021-05-24 07:09:45.757932700   \n",
       "117171      2021-05-25 08:12:02.792699800 2021-05-24 07:25:18.808585400   \n",
       "117178      2021-05-25 08:12:25.573868400 2021-05-24 07:37:25.344780300   \n",
       "\n",
       "                          LastAccess0x10               LastAccess0x30  \\\n",
       "EntryNumber                                                             \n",
       "110904       2021-05-24 07:01:46.9355305                          NaN   \n",
       "116957       2021-05-24 07:09:45.7569273                          NaN   \n",
       "117171       2021-05-24 07:25:18.8075824                          NaN   \n",
       "117178       2021-05-24 07:37:25.3457838  2021-05-24 07:37:25.3447803   \n",
       "\n",
       "             UpdateSequenceNumber  LogfileSequenceNumber  SecurityId  \\\n",
       "EntryNumber                                                            \n",
       "110904                32523174816           183059500486         522   \n",
       "116957                32523174488           183059499899         522   \n",
       "117171                32523175784           183059502709         522   \n",
       "117178                32524116232           183060749720        2072   \n",
       "\n",
       "            ObjectIdFileDroid LoggedUtilStream ZoneIdContents  \n",
       "EntryNumber                                                    \n",
       "110904                    NaN              NaN            NaN  \n",
       "116957                    NaN              NaN            NaN  \n",
       "117171                    NaN              NaN            NaN  \n",
       "117178                    NaN              NaN            NaN  "
      ]
     },
     "execution_count": 27,
     "metadata": {},
     "output_type": "execute_result"
    }
   ],
   "source": [
    "files.head()"
   ]
  }
 ],
 "metadata": {
  "kernelspec": {
   "display_name": "Python 3",
   "language": "python",
   "name": "python3"
  },
  "language_info": {
   "codemirror_mode": {
    "name": "ipython",
    "version": 3
   },
   "file_extension": ".py",
   "mimetype": "text/x-python",
   "name": "python",
   "nbconvert_exporter": "python",
   "pygments_lexer": "ipython3",
   "version": "3.8.2"
  }
 },
 "nbformat": 4,
 "nbformat_minor": 5
}